4.4.2 Remote command lockdown

Information

Removes all permissions from the remote service commands: rsh, rlogin and rcp.

Rationale:

This effectively disables the following commands, for all users:

/usr/bin/rcp

/usr/bin/rlogin

/usr/bin/rsh

These remote services send usernames and passwords in clear text and should not be used. Unless required these binaries will be disabled for all users. The SSH suite of commands should be utilized to provide equivalent functionality

Solution

Use the chmod command to remove all permissions on the remote services:

chmod ugo= /usr/bin/rcp
chmod ugo= /usr/bin/rlogin
chmod ugo= /usr/bin/rsh

Default Value:

N/A

See Also

https://workbench.cisecurity.org/benchmarks/13069

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3

Plugin: Unix

Control ID: 5ed43318b6f4616c55a80628965d88ebc3ad3712706ef6f5b2972b05c445a452